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DETAILED ACTION 

1 . This action is responding to application papers filed 11-21-2003. 

2. Claims 1 - 6, 8 - 19, 31 - 36, 38, 39, 41 - 43, 45 - 52, 54, 56 - 61 are pending. 
Claims 2 - 6, 9,11 -14,17,18. 31,34 - 36, 38, 39, 41, 42, 45, 47, 49 - 52, 54, 57, 59 - 
61 have been amended. Claims 7, 20 - 30, 37, 40, 44, 53, 55 have been cancelled. 
Claims 1, 31, 34, 49 are independent. 

Response to Arguments 

3. Applicant's arguments filed 4/22/2008 have been fully considered but they are not 
persuasive. 

3.1 Applicant argues that the referenced prior art does not disclose, "obtaining a clear 
form external integrity hash of first data comprising said clear fonna rights information 
and an extemal key as an integrity secret", (see Remarks Page 1 1 ) 

Nonaka is not used to disclose and reject the usage of clear form rights 
information. Nonaka is not used to disclose and reject the usage of the inaccessible 
device key. The Office Action indicates the prior art reference(s) used to reject these 
particular claim limitation(s). 

The Hal! prior art is used to reject the generation and usage of clear form rights 
information in order to achieve the advantage of easy access by simplifying rights 
enforcement as per invention, (see specification page 4, lines 26-29: "Storing the 
information in clear form can greatly simplify rights enforcement and/or usage reporting 
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because the information does not need to be decrypted before it can be read or used 
either on the client device or by an external device.") 

Applicant repeats what Hall states: "that such data stmctures do not themselves 
constitute such rights information." (see Remarks Page 11) Just the data structures 
themselves do not constitute digital rights information. The contents of the data 
structures contain the rights information. 

The Hall prior art discloses the usage of clear form rights information plus the 
protection and security of data integrity using a cryptographic hash, (see Hall col. 2, 
lines 7-14; col. 6, lines 12-16; coL 6, lines 28-32: digital rights management; col. 6, lines 
1 9-28: clear form storage of digital rights information, integrity hash) The Thoma prior 
art is used to disclose and reject the inaccessible device key limitation, (see Thoma 
paragraph [0005], lines 1-3: content distribution; paragraph [0031], lines 15-21; 
paragraph [0033], lines 5-9; paragraph [0033], lines 11-12: inaccessible key) 

Amendments place adjectives (such as "internal", "external") for the previously 
generated integrity hash parameters. A hash is a well known cryptographic function. It 
is unclear what applicant is claiming, the generation of a hash (which is well known in 
the art) or the contents of the hash? Applicant indicates the contents of two ("internal", 
"external") integrity hash parameters. The contents of each hash in different. Is this the 
invention, a precise set of parameters in the integrity hash? And, the clear form 
representation as an added feature. 

3.2 Applicant argues client device key. (see Remarks Page 12) 

The Thoma prior art is used to disclose and reject the inaccessible device key 
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iimitation. (see Thome paragraph [0005], lines 1-3: content distribution; paragraph 
[0031], lines 15-21; paragraph [0033], iines 5-9; paragraph [0033], lines 11-12: 
Inaccessible key) 

3.3 Applicant argues a second Integrity hash using a first Integrity hash, (see 
Remarks Page 14) 

The Serret-Avila prior art discloses generating a second integrity hash using a 
previously generated integrity hash value as input, (see Serret-Avila col.4, lines 43-49; 
col. 5, lines 2-11: integrity hash generation using input hash value) 

3.4 Applicant argues obviousness and hindsight, (see Remarks Pages 15,16) 
The rejection to each independent and dependent claim includes a citation from 

the referenced prior art that discloses the basis for the rejection. Each obviousness 
combination clearly indicates the claim limitation the combined reference prior art 
teaches. In addition, a cited passage from the referenced prior art clearly indicates the 
motivation for the obviousness combination. Each obviousness combination's 
disclosure is equivalent to the Applicant's claimed limitation(s) for the claimed invention. 

Achieved advantage is a valid motivation for the combination of referenced prior 
art. The combination of each referenced prior art combination states a motivation for 
the combination, which translates to an achieved advantage for the combination. 

A search of applicant's invention field of endeavor would have revealed a set of 
prior art including the referenced prior art. Motivation Is provided within the Office 
Action for each combination. The combination of the indicated referenced prior art 
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successfully discloses the indicated claim limitations and the claimed invention. 

In response to applicant's argument that the examiner's conciusion of obviousness 
is based upon improper hindsight reasoning, it must be recognized that any judgment 
on obviousness is in a sense necessarily a reconstruction based upon hindsight 
reasoning. But so long as it takes into account only knowledge which was within the 
level of ordinary ski!! at the time the claimed invention was made, and does not include 
knowledge gleaned only from the applicant's disclosure, such a reconstruction is proper. 
See In re McLaughlin, 443 F.2d 1392, 170 USPQ 209 (CCPA 1971 ). 

3.5 The Nonaka prior art discloses an apparatus for encryption functions with 
cryptographic key capabilities and a license (resource, device) key. (see Nonaka 
paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], lines 2-6: 
attached host CPU, client, apparatus, license (device) key) Applicant has before 
mentioned a unique key but the term "unique" does not appear anywhere within the 
specification or the original claims. There is no disclosure in the specification or the 
original claims that the device key is unique. 

The Nonaka prior art discloses the capability for the usage of content data to be 
tracked. The usage of content is tracked and logged by the Nonaka prior art. 
(see Nonaka paragraph [0053], lines 23-27: track content usage) 

The Nonaka prior art discloses playback capability. There is no indication of 
placing a limitation or restriction on the playback capabilities of content data. The 
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unlimited playback of content data is disclosed, (see Nonaka paragraph [0362], lines 1- 
2; paragraph [0477], lines 1-3: unrestricted (unlimited) playback capabilities) 

The Nonaka and Chase prior art combination discloses the capability for content 
data revocation (disabling) as presented within the claimed limitation, (see Chase col. 3, 
lines 60-63: usage request; col. 4, lines 10-16; col. 33, lines 54-56; col. 33, lines 60-63; 
col. 34, lines 4-9: content compromised, content disabled, access permitted only if 
content Is not disabled) The Chase prior art is in an analogous field of endeavor, which 
is the field of content data access management and its protection based on access 
rights. Any additional functions do not remove the fact that the referenced prior art 
discloses the revocation or disabling of content data. 

The Serret-Avila prior art is in the same field of endeavor as the claimed invention. 
The Serret-Avila prior art concerns systems and methods for authenticating and 
protecting the integrity of electronic information (content data) using cryptographic 
techniques. The generation of a hash is a cryptographic technique and utilized in the 
claimed invention. Authentication is the application of access rights to electronic 
information or content data to determine the scope of access and utilized in the claimed 
invention. 

Applicant is reminded that the test for obviousness is not whether the features of 
a secondary reference may be bodily incorporated into the structure of the primary 
reference; nor is it that the claimed invention must be expressly suggested in any one or 
all of the references. Rather, the test is what the combined teachings of the references 



Application/Control Number: 10/719,674 Page 7 

Art Unit: 2136 

would have suggested to those of ordinary ski!! in tlie art. See In re Keller, 642 F.2d 
413, 208 USPQ 871 (CCPA 1981). 

Furthermore, in response to applicant's arguments against the reference 
individually, one cannot show nonobviousness by attacking references individually 
where rejections are based on combinations of references. See In re Keller, 642 F.2d 
41 3, 208 USPQ 871 (CCPA 1981); In re Merck & Co., 800 F.2d 1091 , 231 USPQ 375 
(Fed. Cir. 1986). 

Applicant has mentioned the number of references used for the grounds of 
rejection, (see Remarks Page 1 1 : prior art abounds with references) in response to 
applicant's argument that the examiner has combined an excessive number of 
references, reliance on a large number of references in a rejection does not, without 
more, weigh against the obviousness of the claimed invention. See In re Gorman, 933 
F.2d 982. 18 USPQ2d 1885 (Fed. Cir. 1991). 

After an additional analysis of the applicant's invention, remarks, and a search of 
the available prior art, it was determined that the current set of prior art consisting of 
Nonaka (20030046238), Serret-Avila (6.959,384), Chase (7,080,043), Hall (7,062,500), 
and Thoma (20020152393) discloses the applicant's invention. 



4. 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
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obviousness rejections set fortli in tliis Office action: 

a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 1 02 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

5. Claims 1 - 4, 8, 9, 11 - 19, 31, 34 - 36, 38, 39, 41, 42, 45 - 52, 54, 56, 57, 59, 61 

are rejected under 35 U.S.C. 103(a) as being unpatentable over Nonaka et al. (US 
PGPUB No. 20030046238) in view of Hall et al. (US Patent No. 7,062,500) and further 
in view of Thoma et al. (US PGPUB No. 20020152393). 

Regarding Claim 1, Nonaka discloses a method comprising: 

a) obtaining dear form rights information at a client device, said dear form rights 
information b eing associated with content stored at said client site; (see Hall col. 
2, lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital rights management; 
col. 6, lines 19-22: clear form storage of digital rights information) 

c) storing the encrypted hash on the client device, (see Nonaka paragraph [0246], 
lines 1-4: storage circuit for encrypted content key data; paragraph [0019], lines 
1-6; paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], 
lines 2-6: attached host CPU, dient) 

Nonaka discloses wherein obtaining an integrity hash of rights information stored at 
a client device; (see Nonaka paragraph [0019], lines 1-6; paragraph [0019], lines 7- 
11; paragraph [0027], lines 1-7: generate (i.e. obtain) integrity hash using UCP (i.e. 
rights) information; paragraph [0246], lines 1-4: storage circuit for encrypted content 
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key data; paragraph [0019], lines 1-6; paragraph [0019], lines 7-1 1 : data processing 
apparatus; paragraph [0339], lines 2-6: attached host CPU, client; paragraph [0192], 
lines 1-5; paragraph [0239], lines 1-3: data storage) Nonaka does not specifically 
disclose whereby rights information stored in a clear form. 
However, Hall discloses: 

a) obtaining a clear form external integrity hash of first data comprising said clear 
form rights information and an external key as an integrity secret , (see Hall col. 
2, lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital rights management; 
col. 6, lines 19-22: clear form storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nanaka 
for the storage of digital rights information in clear form as taught by Hall. One of 
ordinary skill in the art would have been motivated to employ the teachings of Hall in 
order to enable the capability to ensure data structure integrity, flexibility, 
interoperability in the management of digital rights information, (see Hall col. 1 , 
lines 34-37: "... The present invention also provides tecliniques for providing riglits 
management data structure integrity, flexibility, interoperability, user and system 
transparency, and compatibility. ... ") 

Nonaka-Hall discloses wherein encrypting the integrity hash using a client device 
key to generate an encrypted hash, said client device key being externally 
inaccessible from the client device; (see Nonaka paragraph [0026], lines 21-25: 
encryption utilized UCP (i.e. rights) information; paragraph [0036], lines 1-4: license 
(i.e. device) keys utilized; paragraph [0346], lines 5-8) Nonaka-Hall does not 
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specifically disclose whereby device key being externally inaccessible from the client 
device. 

However, Thoma discloses: 

b) device key being externally inaccessible from the client device; (see Thoma 
paragraph [0005], lines 1-3: content distribution; paragraph [0031], lines 15-21; 
paragraph [0033], lines 5-9; paragraph [0033], lines 11-12: inaccessible key) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall for an inaccessible key as taught by Thoma. One of ordinary skill in the art 
would have been motivated to employ the teachings of Thoma in order for the 
selection of the terminal device to receive distribute digital content from a wide 
variety of devices, (see Thoma paragraph [001 2], lines 7-1 3: "... The invention 
also allows free selection of the terminal device on which content is consumed. That 
is, the invention enables a wide variety of devices to distribute digital content to. The 
invention also provides a system that allows for transferring content from one 
terminal device to another, while still protecting the rights of the copyright owner. . . . 
") 

Regarding Claims 2, 35, 50, Nonaka discloses the method of claim 1 wherein 
obtaining the clear form externa! integrity hash comprises: receiving the clear form 
external integrity hash from a server device, (see Nonaka paragraph [0476], lines 1-4; 
paragraph [0525], lines 3-6: receive hash, UCP (i.e. rights) information; paragraph 
[0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; paragraph 
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[0339], lines 2-6: attached host CPU, server) 



Page 1 1 



Regarding Claims 3, 36, 51, Nonaka discloses the method of claim 1 wherein 
obtaining the internal integrity hash comprises: generating the internal integrity hash on 
the client device, (see Nonaka paragraph [0027], lines 1-7: generate hash; paragraph 
[0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; paragraph 
[0339], lines 2-6: attached host CPU, client) 

Regarding Claims 4, 37, 52, Nonaka discloses the metho d of claim 1 comp risin g 
storing said clear form external intearitv hash on the client device, {see Hall col. 2, lines 
7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19- 
22: clear form storage of digital rights information) 

It would have been obvious to one of ordinary skill in the art to modify Nanaka for 
the storage of digital rights information in dear form as taught by Hall. One of ordinary 
skill in the art would have been motivated to employ the teachings of Hall in order to 
ensure data structure integrity, flexibility, interoperability in the management of digital 
rights infomnation. (see Hall col. 1 , lines 34-37) 

Regarding Claims 8, 56, Nonaka discloses the method of claim 1 further comprising: 

a) receiving, at the client device, a content key for the content; (see Nonaka 
paragraph [0026], lines 21-25: receive encryption key) 

b) encrypting the content key using the client device key to generate an encrypted 
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content key; (see Nonaka paragraph [0026], lines 21-25: encryption utilized; 
paragraph [0036], lines 1-4: license (i.e. device) key utilized) and 
c) storing the encrypted content key on the client device, (see Nonaka paragraph 
[0246], lines 1-4: storage circuit for encrypted content key data; paragraph 
[0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; 
paragraph [0339], lines 2-6: attached host CPU, client) 

Regarding Claims 9, 42, 57, Nonaka discloses the method of claim 1 further 
comprising: 

a) generating a validation hash from at least the rights information; (see Nonaka 
paragraph [0019, lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus (i.e. client device); paragraph [0027], lines 1-7: generate integrity (i.e. 

validation) hash) 

b) decrypting the encrypted internal inteqritv hash to recover the internal integrity 
hash; (see Nonaka paragraph [0019], lines 1-6; paragraph [0021], lines 3-8: 
decryption of UCP (i.e. rights) information) and 

c) comparing the validation hash to the integrity hash to detect tampering with the 
rights information, (see Nonaka paragraph [0246], lines 4-8: comparison of hash 
values to detect tampering) 

Regarding Claim 11, Nonaka discloses the method of claim 1. (see Nonaka paragraph 
[0246], lines 1-4: storage circuit for UCP (i.e. rights information), and content key data; 
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paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; 
paragraph [0339], lines 2-6: attached host CPU, client) Nonaka does not specifically 
disclose whereby storing the rights information on the client device in a clear form. 
However, Hall discloses wherein storing the rights information on the client device in a 
clear form, (see Hall col. 2, lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital 
rights management; col. 6, lines 19-22: clear form storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nanaka for 
the storage of digital rights information in clear form as taught by Hall. One of ordinary 
skill in the art would have been motivated to employ the teachings of Hall in order to 
ensure data structure integrity, flexibility, interoperability in the management of digital 
rights information, (see Hall col. 1 , lines 34-37) 

Regarding Claims 12, 60, Nonaka discloses the method of claim 10 further comprising: 
reading the dear form rights information from the client device out to a server device, 
(see Nonaka paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: transfer UCP (i.e. 
rights) information) Nonaka does not specifically disclose whereby reading the rights 
information from the client device in the clear form. However, Hall discloses wherein 
reading the rights information from the client device, (see Hall col. 2, lines 7-14; col. 6, 
lines 12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear form 
storage of digital rights information) 

It would have been obvious to one of ordinary skill in the art to modify Nanaka for 
reading the rights information from the client device in the clear form as taught by Hall. 
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One of ordinary skill in the art would have been motivated to employ the teachings of 
Hall in order to ensure data structure integrity, flexibility, interoperability in the 
management of digital rights information, (see Hall col. 1 , lines 34-37) 

Regarding Claims 13, 45, 61, Nonaka discloses the method of claim 1 wherein the 
clear form rights information comprises usage information, the method further 
comprising: 

a) tracking usage of the content; (see Nonaka paragraph [0053], lines 23-27: track 
content usage) 

b) updating the dear form rights information with changes in usage; (see Nonaka 
paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: transfer (i.e. update) 
UCP (i.e. rights) information) 

for each u pdate 

c) re-obtaining the internal integrity hash of second data comprising the updated 
clear form rights information, said clear form external integrity hash, and said 
externally inaccessible client device kev: (see Hall col. 2, lines 7-14; col. 6, lines 
12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear 
form storage of digital rights information) and 

d) re-encrypting, and re-storing the internal integrity hash on the client device, (see 
Nonaka paragraph [0019, lines 1-6; paragraph [0019], lines 7-11: data 
processing apparatus (i.e. client device); paragraph [0027], lines 1-7: re-generate 
(i.e. generate a second time) integrity hash; paragraph [0246], lines 1-4: storage 
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circuit for encrypted UCP (i.e. riglits) information) 

Regarding Claim 14, Nonal<a discloses tine metliod of claim 1 wherein the internal 
integrity hash comprises a Hash Message Authentication Code (HMAC). (see Nonaka 

paragraph [0027], lines 1-7: generate a hash (i.e. integrity hash) value utilizing 
cryptographic (i.e. encryption/decryption key) procedures in a hash authentication 
processing system) 

Regarding Claims 15, 46, Nonaka discloses the method of claim 1 wherein the client 
device key comprises a code embedded in hardware of the client device having no 
externally accessible data path, (see Nonaka paragraph [0036], lines 1-4: license (i.e. 
device) key utilized; paragraph [0346], lines 5-8: inaccessible secure device utilized for 
hash generation) 

Regarding Claim 16, Nonaka discloses the method of claim 1 wherein the client device 
comprises at least one of an MP3 player, a personal data assistant, and cellular phone, 
(see Nonaka paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus; paragraph [0339], lines 2-6: attached host CPU, client device such as a 
PDA, cellular phone, or MP3 player (i.e. systems containing CPU)) 

Regarding Claim 17, Nonaka discloses the method of claim 1 further comprising at 
least one of: 
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a) downloading tlie clear form riglnts information from a server device; (see Nonal<a 
paragrapli [0476], lines 1-4; paragraph [0525], lines 3-6: transfer (i.e. download) 
UCP (i.e. rights) information) and 

b) installing a storage medium having the rights information stored thereon, (see 
Nonaka paragraph [0537], lines 3-6: place (i.e. install) on recording medium 
containing UCP (i.e. rights) information) 

Regarding Claim 18, Nonaka discloses the method of claim 1 wherein the clear form 
rights information grant s unlimited play for the content on the client device, (see Nonaka 
paragraph [0339], lines 2-6: playback module; paragraph [0346], lines 1-5: playback 
content data) 

Regarding Claim 19, Nonaka discloses the method of claim 3 wherein generating the 
internal integrity hash comprises generating the integrity hash in trusted hardware, (see 
Nonaka paragraph [0027], lines 1-7: obtain, generate integrity hash: SAM (i.e. trusted, 
secure hardware), generate hash; paragraph [0346], lines 5-8: inaccessible secure, 
trusted device) 

Regarding Claim 31, Nonaka discloses a method comprising: 

a) generating a validation hash from validation data comprising stored clear form 
rights information associated with content stored on a client device; (see Nonaka 
paragraph [0019, lines 1-6; paragraph [0019], lines 7-11: data processing 
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apparatus (i.e. client device); paragraph [0027], lines 1-7: generate integrity 
hash; paragraph [0192], lines 1-5; paragraph [0239], lines 1-3: data may be 
stored in an unencrypted (clear text) form) 
c) comparing the validation hash to the integrity hash to detect tampering with the 
clear form rights information, (see Nonaka paragraph [0246], lines 4-8: 
comparison hash values to detect tampering) 

Nonaka discloses wherein decrypting an encrypted hash to recover an integrity hash 
using a n externaiiv inaccessible device key client device key, said integrity hash 
having been previously generated from data comprising the stored rights information 
and a clear form hash of at least the clear form rights information : (see Nonaka 
paragraph [0019], lines 1-6; paragraph [0021], lines 3-8: decryption UCP (i.e. rights) 
information; paragraph [0346], lines 5-8: inaccessible secure device utilized for hash 
generation; paragraph [0192], lines 1-5; paragraph [0239], lines 1-3: data storage) 
Nonaka does not specifically discloses whereby stored clear form rights information. 
However, Hall discloses: 

b) stored clear form rights information; (see Hall col. 2, lines 7-14; col. 6, lines 12- 
16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear form 
storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nanaka 
for the storage of digital rights information in clear form as taught by Hall. One of 
ordinary skill in the art would have been motivated to employ the teachings of Hall in 
order to ensure data structure integrity, flexibility, interoperability in the management 
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of digital rights information, (see Hall col. 1 , lines 34-37) 

Nonaka-Hall does not specifically disclose whereby a client device key that is 
externally inaccessible from the client device. However, Thoma discloses wherein a 
client device key that is externally inaccessible from the client device, (see Thoma 
paragraph [0005], lines 1-3: content distribution; paragraph [0031], lines 15-21; 
paragraph [0033], lines 5-9; paragraph [0033], lines 11-12: inaccessible key) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall for an inaccessible key as taught by Thoma. One of ordinary skill in the art 
would have been motivated to employ the teachings of Thoma in order for the 
selection of the terminal device to receive distribute digital content from a wide 
variety of devices, (see Thoma paragraph [001 2], lines 7-1 3) 

Regarding Claim 34, Nonaka discloses a client device comprising: 

c) hash circuitry operative to obtain a clear form external integrity hash of first data 
comprising the dear form rights information; obtain an internal inteqritv hash of 
second data comprising the clear form rights information, the dear form extemal 
inteqritv hash, and the externally inaccessible client device key (see Nonaka 
paragraph [0019, lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus (i.e. client device); paragraph [0027], lines 1-7: generate (i.e. obtain) 
integrity hash) and 

d) encryption circuitry to encrypt the integrity hash using the client device key to 
generate an encrypted hash; (see Nonaka paragraph [0026], lines 21-25: 
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encryption utilized; paragrapli [0036], lines 1-4: license (i.e. device) key utilized) 
e) said memory being further operative to store the encrypted hash, (see Nonaka 
paragraph [0246], lines 1-4: storage circuit for encrypted content key data; 
paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus; paragraph [0339], lines 2-6: attached host CPU, client) 

Nonaka discloses wherein a memory operative to store content and rights 
information associated with the content, said memory being externally accessible; 
(see Nonaka paragraph [0246], lines 1-4: storage circuit for content key data; 
paragraph [0192], lines 1-5; paragraph [0239], lines 1-3: data storage) Nonaka 
does not specifically disclose whereby to store clear form rights information. 
However, Hall discloses: 

b) to store clear form rights information; (see Hall col. 2, lines 7-14; col. 6, lines 12- 
16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear form 
storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nanaka 
for the storage of digital rights information in clear form as taught by Hall. One of 
ordinary skill in the art would have been motivated to employ the teachings of Hall in 
order to ensure data structure integrity, flexibility, interoperability in the management 
of digital rights information, (see Hall col. 1 , lines 34-37) 

Nonaka-Hall discloses wherein a register to store a client device key. (see Nonaka 
paragraph [0048], lines 1-4: register usage by data processing apparatus) Nonaka- 
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Hall does not specifically disclose whereby being externally inaccessible from the 
client device. 

However, Thoma discloses: 

a) said register operative for storing a client device key being externally inaccessible 
from the client device; (see Thoma paragraph [0005], lines 1-3: content 
distribution; paragraph [0031], lines 15-21; paragraph [0033], lines 5-9; 
paragraph [0033], lines 11-12: inaccessible key) 
It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall for an inaccessible key as taught by Thoma. One of ordinary skill in the art 
would have been motivated to employ the teachings of Thoma in order for the 
selection of the terminal device to receive distribute digital content from a wide 
variety of devices, (see Thoma paragraph [0012], lines 7-13) 

Regarding Claim 38, Nonaka discloses the client device of claim 34 said memory 
being further operative to store the integrity hash, (see Nonaka paragraph [0246], lines 
1-4: storage circuit for content data; paragraph [0019], lines 1-6; paragraph [0019], lines 
7-1 1 : data processing apparatus; paragraph [0339], lines 2-6: attached host CPU, 
client) Nonaka does not specifically disclose whereby to store the clear form external 
integrity hash. However, Hall discloses wherein to store the second integrity hash in a 
clear form, (see Hall col. 2, lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital 
rights management; col. 6, lines 19-22: clear form storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nanaka for 
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the storage of digital rights information (integrity hash) in clear form as taught by Hall. 
One of ordinary skill in the art would have been motivated to employ the teachings of 
Hall in order to ensure data structure integrity, flexibility, interoperability in the 
management of digital rights information, (see Hall col. 1 , lines 34-37) 

Regarding Claims 39, 54, Nonaka discloses the method of claim 35 wherein the 
external key comprises a server device key (see Nonaka paragraph [0476], lines 1-4; 
paragraph [0525], lines 3-6: receive hash, UCP (i.e. rights) information; paragraph 
[0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; paragraph 
[0339], lines 2-6: attached host CPU, server), said server device having generated the 
second integrity hash using a server device key. (see Nonaka paragraph [0026], lines 
21-25: encryption utilized; paragraph [0036], lines 1-4: license (i.e. device) key utilized; 
paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; 
paragraph [0339], lines 2-6: attached host CPU, server) 

Regarding Claim 41, Nonaka discloses the client device of claim 34 wherein 

a) the encryption circuitry tuji\}er ggerBt\ye is to encrypt a content key for the 
content using the client device key; (see Nonaka paragraph [0026], lines 21-25: 
encryption utilized; paragraph [0036], lines 1-4: license (i.e. device) key utilized) 
and 

b) the memory is further operative to store the encrypted content key on the client 
device, ((see Nonaka paragraph [0246], lines 1-4: storage circuit (i.e. memory) 
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for encrypted content key data; paragraph [0019], lines 1-6; paragraph [0019], 
lines 7-1 1 : data processing apparatus; paragraph [0339], lines 2-6: attached host 
CPU, client)) 

Regarding Claim 47, Nonaka discloses the client device of claim 34 further comprising 

at least one of: 

a) an input port to download the clear form rights information from a server device; 
(see Nonaka paragraph [0019], lines 7-10: interface (i.e. bus) for UCP (i.e. rights) 
information transfer) and 

b) a storage medium port to receive a storage medium having the clear form rights 
information stored thereon, (see Nonaka paragraph [0246], lines 1-4: storage 
circuit for UCP (i.e. rights) information) 

Regarding Claim 48, Nonaka discloses the client device of claim 47 wherein the 
memory at least partially comprises the storage medium, (see Nonaka paragraph 
[0246], lines 1-4: storage circuit (i.e. memory) for content data) 

Regarding Claim 49, Nonaka discloses a machine readable medium having stored 
thereon machine executable instructions, the execution of which to implement a method 
comprising: 

c) obtaining an integrity hash of the rights information; (see Nonaka paragraph 
[0019, lines 1-6; paragraph [0019], lines 7-11: data processing apparatus (i.e. 
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client device); paragrapli [0027], lines 1-7: generate (i.e. obtain) integrity hash) 

d) encrypting the integrity hash using the client device key to generate an encrypted 
hash; (see Nonaka paragraph [0026], lines 21-25: encryption utilized; paragraph 
[0036], lines 1-4: license (i.e. device) key utilized) and 

e) storing the encrypted hash on the client device, (see Nonaka paragraph [0246], 
lines 1-4: storage circuit for encrypted content key data; paragraph [0019], lines 
1-6; paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], 
lines 2-6: attached host CPU, client) 

Nonaka disclose wherein receiving rights information at a client device, said rights 
information being associated with content stored on the client device, said client 
device having a client device key and storing the rights information on the client 
device, (see Nonaka paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: 
transfer UCP (i.e. rights) information; paragraph [0346], lines 5-8: inaccessible 
secure device utilized for hash generation; paragraph [0192], lines 1-5; paragraph 
[0239], lines 1-3: data storage) Nonaka does not specifically disclose whereby 
receiving clear form rights information, and storing the rights information in a clear 
form. 

However, Hall discloses: 

a) receiving clear form rights information, (see Hall col. 2, lines 7-14; col. 6, lines 
12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear 
form storage of digital rights information) 

b) storing the rights information in a clear form; (see Hall col. 2, lines 7-14; col. 6, 
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lines 12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: 

clear form storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nanaka 
for the receipt and storage of digital rights information in clear form as taught by Hall. 
One of ordinary skill in the art would have been motivated to employ the teachings of 
Hall in order to ensure data structure integrity, flexibility, interoperability in the 
management of digital rights information, (see Hall col. 1 , lines 34-37) 

Nonaka-Hall does not specifically disclose whereby a client device key that is 
externally inaccessible from the client device. However, Thoma discloses wherein a 
client device key that is externally inaccessible from the client device, (see Thoma 
paragraph [0005], lines 1-3: content distribution; paragraph [0031], lines 15-21; 
paragraph [0033], lines 5-9; paragraph [0033], lines 11-12: Inaccessible key) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall for an inaccessible key as taught by Thoma. One of ordinary skill in the art 
would have been motivated to employ the teachings of Thoma In order for the 
selection of the terminal device to receive, distribute digital content from a wide 
variety of devices, (see Thoma paragraph [001 2], lines 7-1 3) 

Regarding Claim 59, Nonaka discloses the method of claim 49 wherein the rights 
Information grants unlimited play for the content on the client device, (see Nonaka 
paragraph [0246], lines 1-4: storage circuit for UCP (i.e. rights information), and content 
key data; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing 
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apparatus; paragraph [0339], lines 2-6: attached host CPU, client; paragraph [0362], 
lines 1-2; paragraph [0477], lines 1-3: unrestricted (unlimited) playback) 

6. Claims 5, 6 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Nonaka-Hall-Thoma and further in view of Serret-Avila et al. (US Patent No. 
6,959,384). 

Regarding Claim 5, Nonaka discloses the method of claim 1 further comprising 

receiving the external key al the client device 

storing the integrity hash on the client device, (see Nonaka paragraph [0246], lines 
1-4: storage circuit for content key data (i.e. first or second integrity hash); paragraph 
[0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; 
paragraph [0339], lines 2-6: attached host CPU, client) 

Nonaka does not specifically disclose whereby storing the integrity hash in a clear 
form. 

However, Hall discloses: 

b) storing the integrity hash in a clear form, (see Hall col. 2, lines 7-14; col. 6, lines 
12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear 
form storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nanaka 
to enable the capability for the storage of digital rights information in clear form as 
taught by Hall. One of ordinary skill in the art would have been motivated to employ 
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the teachings of Hall in order to enable the capability to ensure data structure 
integrity, flexibility, interoperability in the management of digital rights information, 
(see Hall col. 1, lines 34-37) 

Nonaka-Hall does specifically disclose the capability to generate a second integrity 
hash using a first integrity hash. 

However, Serret-Avila discloses: 

a) obtaining a second integrity hash of the rights information; (see Serret-Avila col.4, 
lines 43-49; col. 5, lines 2-1 1 : integrity hash generation using input hash value) 
It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall to generate a second integrity hash as taught by Serret-Avila. One of ordinary 
skill in the art would have been motivated to employ the teachings of Serret-Avila in 
order to enable a relatively fast, secure, and efficient authentication of data streams, 
(see Serret-Avila col. 2, line 66 - col. 3, line 3: "... a need for systems and methods 
that overcome some or all of these limitations by providing relatively fast, secure, 
and efficient authentication of data streams and other electronic content. ...") 

Regarding Claim 6, Nonaka discloses the method of claim 5 wherein obtaining the 
second integrity hash comprises: receiving the second integrity hash from a server 

device (see Nonaka paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: receive 
hash, UCP (i.e. rights) information; paragraph [0019], lines 1-6; paragraph [0019], lines 
7-1 1 : data processing apparatus; paragraph [0339], lines 2-6: attached host CPU, 
server), said server device having generated the second integrity hash using a server 
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device key. (see Nonaka paragraph [0026], lines 21-25: encryption utilized; paragraph 
[0036], lines 1-4: license (i.e. device) key utilized; paragraph [0019], lines 1-6; 
paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], lines 2-6: 
attached host CPU, server) 

7. Claims 10, 32, 33, 43, 58 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Nonaka-Hall-Thoma and further in view of Chase, Jr et al. (US 
Patent No. 7,080,043). 

Regarding Claims 10, 32, 43, 58, Nonaka discloses the method of claim 9. (see 
Nonaka paragraph [0246], lines 4-8: comparison of hash values to detect tampering) 
Nonaka does not specifically disclose disabling the content on the client device if 
tampering is detected. However, Chase discloses wherein disabling the content on the 
client device if tampering is detected, (see Chase col. 3, lines 60-63: usage request; col. 
4, lines 10-16; col. 33, lines 54-56; col. 33, lines 60-63; col. 34, lines 4-9: content 
compromised such as tampering, access to content disabled) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka to 
enable the capability to disable access to content as taught by Chase. One of ordinary 
skill in the art would have been motivated to employ the teachings of Chase in order to 
efficiently manage the rights attached to digital data such as the capability to revoke 
content if compromised, and add or remove a particular right, (see Chase col. 2, lines 
47-51 : "... a need exists for a method and mechanism that allows a content owner to 
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revoke all rights of a user to render a piece of content, such as for example if the 
content owner learns that security with respect to such content has been breached. 
More generally, a need exists for a method and mechanism that allows a content owner 
to modify a license of the user to update rights of the user to render a piece of content, 
such as for example to extend an expiration date, adjust a play count, add or remove a 
particular right, etc. ...") 

Regarding Claim 33, Nonaka discloses the method of claim 31 further comprising: 

wherein to initiate generation of the validation hash and comparison to the integrity 
hash, (see Nonaka paragraph [0027], lines 1-7: generation of validation hash; 
paragraph [0246], lines 4-8: comparison hash values to detect tampering). Nonaka 
does not specifically disclose the capability to disable content. 

However, Chase discloses: 

a) receiving a usage request for the content stored at the client device, said usage 
request; (see Chase col. 3, lines 60-63: usage request; col. 4, lines 10-16; col. 
33, lines 54-56; col. 33, lines 60-63; col. 34, lines 4-9: content compromised, 
access to content disabled) and 

b) permitting usage only if the content is not disabled, (see Chase col. 4, lines 10- 
16; col. 33, lines 54-56; col. 33, lines 60-63; col. 34, lines 4-9: content 
compromised, access to content disabled) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka 
to enable the capability to disable content as taught by Chase. One of ordinary skill 
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in tlie art would liave been motivated to employ the teachings of Chase in order to 
efficiently manage the rights attached to digital data such as the capability to revoke 
content if compromised, and add or remove a particular right, (see Chase col. 2, 
lines 47-51) 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carlton Johnson whose telephone number is 571-270- 
1032. The examiner can normally be reached Monday through Friday from 8:00AM to 
5:00PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
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supervisor, Nassar Moazzami, can be reached on 571-272-4195. Tlie fax plione 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 
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